PogoWasRight.org

Privacy News and Issues

Menu
  • About
  • Privacy
Menu

Governments are hacking people with ‘zero-click’ spyware by showing them online ads

Posted on October 27, 2026October 28, 2026 by Dissent

Zack Whittaker reports:

Security researchers at digital rights unit The Citizen Lab say government spyware makers are abusing global advertising networks to target and hack devices by serving malicious online adverts.

A new report published Thursday by the University of Toronto lab, which investigates surveillance and digital rights abuses, said an Israeli company called Discover-Tech allows spyware makers to use its advertising platform to target specific people or devices almost anywhere in the world with spyware capable of invisibly stealing their data.

The researchers say Discover-Tech presents itself as a legitimate advertising firm, but instead serves as a “bridge between ad vendors and the mercenary spyware ecosystem.”

Citizen Lab said at least two makers of zero-click spyware, Candiru and Bindecy, used Discover-Tech’s platform to target people. Both of these spyware makers provide surveillance products that can infect devices without the victim having to open a message or click on a link.

Read more at TechCrunch.

Category: OnlineSurveillance

Post navigation

← Victory! Court Rules OPM Data Disclosure to DOGE Is Unlawful
Border Searches of Laptops, Phones Up 32% This Year →

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Search

Contact Me

Mastodon: Infosec.Exchange/@PogoWasRight
Signal: Dissent.73

Research Report of Note

A report by EPIC.org:

State Attorneys General & Privacy: Enforcement Trends, 2020-2024

Categories

Recent Posts

  • Loblaw commits to strengthening security measures following privacy breach
  • Privacy Rights Can’t Be Left in the Rearview: Attorney General Bonta Secures $1.8 Million Settlement with Lyft
  • A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat
  • Snapshot for Healthcare Employers: What AI Glasses Mean for Patient Privacy and Recording Consent
  • Oregon Attorney General Rayfield Leads States in $220M Settlement With GM Over Sale of Drivers’ Private Data
  • UK: Action taken against Staffordshire Police after victim’s address wrongly disclosed to alleged abuser
  • Northern District of California Finds No Concrete Injury Despite A Lack of Consent

RSS feed: Recent Posts at DataBreaches.net Recent Posts at DataBreaches.net

  • Syrian Man Sentenced for Wide-Ranging Hacking Conspiracy Conducted on Behalf of the Bashar Al Assad Regime
  • A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System
  • Hackers hit UNM hospital, then apologize and offer patients $2,500. In a new statement, they reveal more about the incident.
  • HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network
  • UK: Second Liverpool hospital investigates staff over breach of Southport attack patient records

Want to Get PogoWasRight’s RSS Feed?

 

It’s at https://pogowasright.org/feed/

©2026 PogoWasRight.org. All rights reserved.